qidao123.com技术社区-IT企服评测·应用市场

标题: 解决Dify:failed to init dify plugin db题目 [打印本页]

---

作者: 拉不拉稀肚拉稀    时间: 2025-4-8 12:44
标题: 解决Dify:failed to init dify plugin db题目
    Dify最新版本1.1.3(langgenius/dify: Dify is an open-source LLM app development platform. Dify's intuitive interface combines AI workflow, RAG pipeline, agent capabilities, model management, observability features and more, letting you quickly go from prototype to production.)，使用docker compose进行当地部署时，在docker container的log中，总会出现如下提示：
“[error] failed to initialize database, got error failed to connect to `host=db user=postgres database=postgres`: hostname resolving error”。对此，dify issues的回答是"This version is not officially supported yet. Please do not use this version if you can not understand it."，并建议你使用0.15.3版本。
    为了解决题目，我向kimi提问，在其中一个回答中给了如下解决方案：
    “你已经使用了 depends_on 来确保 db 和 redis 服务先于 api 服务启动。但 depends_on 只能确保服务启动次序，不能确保服务完全可用。为了确保 PostgreSQL 完全启动后再启动 api 服务，可以使用 wait-for-it.sh 脚本或其他类似的工具。”
    而我使用wait-for-it.sh确实让上述错误消散了。
    首先我分析了dify\docker目录下的docker-compose.yaml文件，发现在dify环境中，各模块的相互依赖关系如下：
api:db,redis
woker:db,redis
plugin_daemon:db
nginx:api,web
    经测试，nginx可以忽略，但是plugin_daemon、api、woker这三个模块必须保证依赖次序关系精确实现。为此我需要将wait-for-it.sh脚本嵌入到这三个模块的docker镜像中，并在该镜像被docker compose加载时，运行wait-for-it.sh，以确保镜像自身运行启动命令前，其前序的模块已经精确加载并运行。api和woker两个模块均依赖langgenius/dify-api:1.1.3，而plugin_daemon则依赖langgenius/dify-plugin-daemon:0.0.6-local。我需要将wait-for-it.sh嵌入到这两个镜像中，并修改dify\docker\docker-compose.yaml文件内容。
我的操纵步骤如下：
1.从 wait-for-it.sh GitHub 堆栈 下载脚本文件wait-for-it.sh。注意下载的wait-for-it.sh要确保其是unix文件格式，也就是行尾不能是CRLF,而应该是LF。一个简单的方法：用vscode打开这个sh文件，在窗口的状态栏中若显示的是"CRLF"，则只需点击这个“CRLF”标识，将其改成LF即可。
2.将这个wait-for-it.sh文件拷贝至git clone的Dify目录下的docker子目录中。我的目录如下：D:\AiTools\dify\docker
3.同时在这个目录中创建一个Dockerfile,内容如下：

1. FROM langgenius/dify-api:1.1.3
3. # 将 wait-for-it.sh 脚本复制到镜像中
4. COPY ./wait-for-it.sh /wait-for-it.sh
6. # 确保脚本具有可执行权限
7. RUN chmod +x /wait-for-it.sh

复制代码

4.在dify\docker目录中打开命令行，运行如下命令：

1. docker buildx build . -t langgenius/dify-api:1.1.4

复制代码

上述命令将生成一个新的langgenius/dify-api:1.1.4镜像。同样，将上述Dockerfile文件的首行修改成如下内容：

1. FROM langgenius/dify-plugin-daemon:0.0.6-local
3. # 将 wait-for-it.sh 脚本复制到镜像中
4. COPY ./wait-for-it.sh /wait-for-it.sh
6. # 确保脚本具有可执行权限
7. RUN chmod +x /wait-for-it.sh

复制代码

运行以下命令生成新的langgenius/dify-plugin-daemon:0.0.7-local镜像。

1. docker buildx build . -t langgenius/dify-plugin-daemon:0.0.7-local

复制代码

5.修改dify\docker\docker-compose.yaml文件内容如下：

1. # ==================================================================
2. # WARNING: This file is auto-generated by generate_docker_compose
3. # Do not modify this file directly. Instead, update the .env.example
4. # or docker-compose-template.yaml and regenerate this file.
5. # ==================================================================
7. x-shared-env: &shared-api-worker-env
8.   CONSOLE_API_URL: ${CONSOLE_API_URL:-}
9.   CONSOLE_WEB_URL: ${CONSOLE_WEB_URL:-}
10.   SERVICE_API_URL: ${SERVICE_API_URL:-}
11.   APP_API_URL: ${APP_API_URL:-}
12.   APP_WEB_URL: ${APP_WEB_URL:-}
13.   FILES_URL: ${FILES_URL:-}
14.   LOG_LEVEL: ${LOG_LEVEL:-INFO}
15.   LOG_FILE: ${LOG_FILE:-/app/logs/server.log}
16.   LOG_FILE_MAX_SIZE: ${LOG_FILE_MAX_SIZE:-20}
17.   LOG_FILE_BACKUP_COUNT: ${LOG_FILE_BACKUP_COUNT:-5}
18.   LOG_DATEFORMAT: ${LOG_DATEFORMAT:-%Y-%m-%d %H:%M:%S}
19.   LOG_TZ: ${LOG_TZ:-UTC}
20.   DEBUG: ${DEBUG:-false}
21.   FLASK_DEBUG: ${FLASK_DEBUG:-false}
22.   SECRET_KEY: ${SECRET_KEY:-sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U}
23.   INIT_PASSWORD: ${INIT_PASSWORD:-}
24.   DEPLOY_ENV: ${DEPLOY_ENV:-PRODUCTION}
25.   CHECK_UPDATE_URL: ${CHECK_UPDATE_URL:-https://updates.dify.ai}
26.   OPENAI_API_BASE: ${OPENAI_API_BASE:-https://api.openai.com/v1}
27.   MIGRATION_ENABLED: ${MIGRATION_ENABLED:-true}
28.   FILES_ACCESS_TIMEOUT: ${FILES_ACCESS_TIMEOUT:-300}
29.   ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-60}
30.   REFRESH_TOKEN_EXPIRE_DAYS: ${REFRESH_TOKEN_EXPIRE_DAYS:-30}
31.   APP_MAX_ACTIVE_REQUESTS: ${APP_MAX_ACTIVE_REQUESTS:-0}
32.   APP_MAX_EXECUTION_TIME: ${APP_MAX_EXECUTION_TIME:-1200}
33.   DIFY_BIND_ADDRESS: ${DIFY_BIND_ADDRESS:-0.0.0.0}
34.   DIFY_PORT: ${DIFY_PORT:-5001}
35.   SERVER_WORKER_AMOUNT: ${SERVER_WORKER_AMOUNT:-1}
36.   SERVER_WORKER_CLASS: ${SERVER_WORKER_CLASS:-gevent}
37.   SERVER_WORKER_CONNECTIONS: ${SERVER_WORKER_CONNECTIONS:-10}
38.   CELERY_WORKER_CLASS: ${CELERY_WORKER_CLASS:-}
39.   GUNICORN_TIMEOUT: ${GUNICORN_TIMEOUT:-360}
40.   CELERY_WORKER_AMOUNT: ${CELERY_WORKER_AMOUNT:-}
41.   CELERY_AUTO_SCALE: ${CELERY_AUTO_SCALE:-false}
42.   CELERY_MAX_WORKERS: ${CELERY_MAX_WORKERS:-}
43.   CELERY_MIN_WORKERS: ${CELERY_MIN_WORKERS:-}
44.   API_TOOL_DEFAULT_CONNECT_TIMEOUT: ${API_TOOL_DEFAULT_CONNECT_TIMEOUT:-10}
45.   API_TOOL_DEFAULT_READ_TIMEOUT: ${API_TOOL_DEFAULT_READ_TIMEOUT:-60}
46.   DB_USERNAME: ${DB_USERNAME:-postgres}
47.   DB_PASSWORD: ${DB_PASSWORD:-difyai123456}
48.   DB_HOST: ${DB_HOST:-db}
49.   DB_PORT: ${DB_PORT:-5432}
50.   DB_DATABASE: ${DB_DATABASE:-dify}
51.   SQLALCHEMY_POOL_SIZE: ${SQLALCHEMY_POOL_SIZE:-30}
52.   SQLALCHEMY_POOL_RECYCLE: ${SQLALCHEMY_POOL_RECYCLE:-3600}
53.   SQLALCHEMY_ECHO: ${SQLALCHEMY_ECHO:-false}
54.   POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-100}
55.   POSTGRES_SHARED_BUFFERS: ${POSTGRES_SHARED_BUFFERS:-128MB}
56.   POSTGRES_WORK_MEM: ${POSTGRES_WORK_MEM:-4MB}
57.   POSTGRES_MAINTENANCE_WORK_MEM: ${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}
58.   POSTGRES_EFFECTIVE_CACHE_SIZE: ${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}
59.   REDIS_HOST: ${REDIS_HOST:-redis}
60.   REDIS_PORT: ${REDIS_PORT:-6379}
61.   REDIS_USERNAME: ${REDIS_USERNAME:-}
62.   REDIS_PASSWORD: ${REDIS_PASSWORD:-difyai123456}
63.   REDIS_USE_SSL: ${REDIS_USE_SSL:-false}
64.   REDIS_DB: ${REDIS_DB:-0}
65.   REDIS_USE_SENTINEL: ${REDIS_USE_SENTINEL:-false}
66.   REDIS_SENTINELS: ${REDIS_SENTINELS:-}
67.   REDIS_SENTINEL_SERVICE_NAME: ${REDIS_SENTINEL_SERVICE_NAME:-}
68.   REDIS_SENTINEL_USERNAME: ${REDIS_SENTINEL_USERNAME:-}
69.   REDIS_SENTINEL_PASSWORD: ${REDIS_SENTINEL_PASSWORD:-}
70.   REDIS_SENTINEL_SOCKET_TIMEOUT: ${REDIS_SENTINEL_SOCKET_TIMEOUT:-0.1}
71.   REDIS_USE_CLUSTERS: ${REDIS_USE_CLUSTERS:-false}
72.   REDIS_CLUSTERS: ${REDIS_CLUSTERS:-}
73.   REDIS_CLUSTERS_PASSWORD: ${REDIS_CLUSTERS_PASSWORD:-}
74.   CELERY_BROKER_URL: ${CELERY_BROKER_URL:-redis://:difyai123456@redis:6379/1}
75.   BROKER_USE_SSL: ${BROKER_USE_SSL:-false}
76.   CELERY_USE_SENTINEL: ${CELERY_USE_SENTINEL:-false}
77.   CELERY_SENTINEL_MASTER_NAME: ${CELERY_SENTINEL_MASTER_NAME:-}
78.   CELERY_SENTINEL_SOCKET_TIMEOUT: ${CELERY_SENTINEL_SOCKET_TIMEOUT:-0.1}
79.   WEB_API_CORS_ALLOW_ORIGINS: ${WEB_API_CORS_ALLOW_ORIGINS:-*}
80.   CONSOLE_CORS_ALLOW_ORIGINS: ${CONSOLE_CORS_ALLOW_ORIGINS:-*}
81.   STORAGE_TYPE: ${STORAGE_TYPE:-opendal}
82.   OPENDAL_SCHEME: ${OPENDAL_SCHEME:-fs}
83.   OPENDAL_FS_ROOT: ${OPENDAL_FS_ROOT:-storage}
84.   S3_ENDPOINT: ${S3_ENDPOINT:-}
85.   S3_REGION: ${S3_REGION:-us-east-1}
86.   S3_BUCKET_NAME: ${S3_BUCKET_NAME:-difyai}
87.   S3_ACCESS_KEY: ${S3_ACCESS_KEY:-}
88.   S3_SECRET_KEY: ${S3_SECRET_KEY:-}
89.   S3_USE_AWS_MANAGED_IAM: ${S3_USE_AWS_MANAGED_IAM:-false}
90.   AZURE_BLOB_ACCOUNT_NAME: ${AZURE_BLOB_ACCOUNT_NAME:-difyai}
91.   AZURE_BLOB_ACCOUNT_KEY: ${AZURE_BLOB_ACCOUNT_KEY:-difyai}
92.   AZURE_BLOB_CONTAINER_NAME: ${AZURE_BLOB_CONTAINER_NAME:-difyai-container}
93.   AZURE_BLOB_ACCOUNT_URL: ${AZURE_BLOB_ACCOUNT_URL:-https://<your_account_name>.blob.core.windows.net}
94.   GOOGLE_STORAGE_BUCKET_NAME: ${GOOGLE_STORAGE_BUCKET_NAME:-your-bucket-name}
95.   GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64: ${GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64:-}
96.   ALIYUN_OSS_BUCKET_NAME: ${ALIYUN_OSS_BUCKET_NAME:-your-bucket-name}
97.   ALIYUN_OSS_ACCESS_KEY: ${ALIYUN_OSS_ACCESS_KEY:-your-access-key}
98.   ALIYUN_OSS_SECRET_KEY: ${ALIYUN_OSS_SECRET_KEY:-your-secret-key}
99.   ALIYUN_OSS_ENDPOINT: ${ALIYUN_OSS_ENDPOINT:-https://oss-ap-southeast-1-internal.aliyuncs.com}
100.   ALIYUN_OSS_REGION: ${ALIYUN_OSS_REGION:-ap-southeast-1}
101.   ALIYUN_OSS_AUTH_VERSION: ${ALIYUN_OSS_AUTH_VERSION:-v4}
102.   ALIYUN_OSS_PATH: ${ALIYUN_OSS_PATH:-your-path}
103.   TENCENT_COS_BUCKET_NAME: ${TENCENT_COS_BUCKET_NAME:-your-bucket-name}
104.   TENCENT_COS_SECRET_KEY: ${TENCENT_COS_SECRET_KEY:-your-secret-key}
105.   TENCENT_COS_SECRET_ID: ${TENCENT_COS_SECRET_ID:-your-secret-id}
106.   TENCENT_COS_REGION: ${TENCENT_COS_REGION:-your-region}
107.   TENCENT_COS_SCHEME: ${TENCENT_COS_SCHEME:-your-scheme}
108.   OCI_ENDPOINT: ${OCI_ENDPOINT:-https://your-object-storage-namespace.compat.objectstorage.us-ashburn-1.oraclecloud.com}
109.   OCI_BUCKET_NAME: ${OCI_BUCKET_NAME:-your-bucket-name}
110.   OCI_ACCESS_KEY: ${OCI_ACCESS_KEY:-your-access-key}
111.   OCI_SECRET_KEY: ${OCI_SECRET_KEY:-your-secret-key}
112.   OCI_REGION: ${OCI_REGION:-us-ashburn-1}
113.   HUAWEI_OBS_BUCKET_NAME: ${HUAWEI_OBS_BUCKET_NAME:-your-bucket-name}
114.   HUAWEI_OBS_SECRET_KEY: ${HUAWEI_OBS_SECRET_KEY:-your-secret-key}
115.   HUAWEI_OBS_ACCESS_KEY: ${HUAWEI_OBS_ACCESS_KEY:-your-access-key}
116.   HUAWEI_OBS_SERVER: ${HUAWEI_OBS_SERVER:-your-server-url}
117.   VOLCENGINE_TOS_BUCKET_NAME: ${VOLCENGINE_TOS_BUCKET_NAME:-your-bucket-name}
118.   VOLCENGINE_TOS_SECRET_KEY: ${VOLCENGINE_TOS_SECRET_KEY:-your-secret-key}
119.   VOLCENGINE_TOS_ACCESS_KEY: ${VOLCENGINE_TOS_ACCESS_KEY:-your-access-key}
120.   VOLCENGINE_TOS_ENDPOINT: ${VOLCENGINE_TOS_ENDPOINT:-your-server-url}
121.   VOLCENGINE_TOS_REGION: ${VOLCENGINE_TOS_REGION:-your-region}
122.   BAIDU_OBS_BUCKET_NAME: ${BAIDU_OBS_BUCKET_NAME:-your-bucket-name}
123.   BAIDU_OBS_SECRET_KEY: ${BAIDU_OBS_SECRET_KEY:-your-secret-key}
124.   BAIDU_OBS_ACCESS_KEY: ${BAIDU_OBS_ACCESS_KEY:-your-access-key}
125.   BAIDU_OBS_ENDPOINT: ${BAIDU_OBS_ENDPOINT:-your-server-url}
126.   SUPABASE_BUCKET_NAME: ${SUPABASE_BUCKET_NAME:-your-bucket-name}
127.   SUPABASE_API_KEY: ${SUPABASE_API_KEY:-your-access-key}
128.   SUPABASE_URL: ${SUPABASE_URL:-your-server-url}
129.   VECTOR_STORE: ${VECTOR_STORE:-weaviate}
130.   WEAVIATE_ENDPOINT: ${WEAVIATE_ENDPOINT:-http://weaviate:8080}
131.   WEAVIATE_API_KEY: ${WEAVIATE_API_KEY:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
132.   QDRANT_URL: ${QDRANT_URL:-http://qdrant:6333}
133.   QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
134.   QDRANT_CLIENT_TIMEOUT: ${QDRANT_CLIENT_TIMEOUT:-20}
135.   QDRANT_GRPC_ENABLED: ${QDRANT_GRPC_ENABLED:-false}
136.   QDRANT_GRPC_PORT: ${QDRANT_GRPC_PORT:-6334}
137.   MILVUS_URI: ${MILVUS_URI:-http://host.docker.internal:19530}
138.   MILVUS_TOKEN: ${MILVUS_TOKEN:-}
139.   MILVUS_USER: ${MILVUS_USER:-}
140.   MILVUS_PASSWORD: ${MILVUS_PASSWORD:-}
141.   MILVUS_ENABLE_HYBRID_SEARCH: ${MILVUS_ENABLE_HYBRID_SEARCH:-False}
142.   MYSCALE_HOST: ${MYSCALE_HOST:-myscale}
143.   MYSCALE_PORT: ${MYSCALE_PORT:-8123}
144.   MYSCALE_USER: ${MYSCALE_USER:-default}
145.   MYSCALE_PASSWORD: ${MYSCALE_PASSWORD:-}
146.   MYSCALE_DATABASE: ${MYSCALE_DATABASE:-dify}
147.   MYSCALE_FTS_PARAMS: ${MYSCALE_FTS_PARAMS:-}
148.   COUCHBASE_CONNECTION_STRING: ${COUCHBASE_CONNECTION_STRING:-couchbase://couchbase-server}
149.   COUCHBASE_USER: ${COUCHBASE_USER:-Administrator}
150.   COUCHBASE_PASSWORD: ${COUCHBASE_PASSWORD:-password}
151.   COUCHBASE_BUCKET_NAME: ${COUCHBASE_BUCKET_NAME:-Embeddings}
152.   COUCHBASE_SCOPE_NAME: ${COUCHBASE_SCOPE_NAME:-_default}
153.   PGVECTOR_HOST: ${PGVECTOR_HOST:-pgvector}
154.   PGVECTOR_PORT: ${PGVECTOR_PORT:-5432}
155.   PGVECTOR_USER: ${PGVECTOR_USER:-postgres}
156.   PGVECTOR_PASSWORD: ${PGVECTOR_PASSWORD:-difyai123456}
157.   PGVECTOR_DATABASE: ${PGVECTOR_DATABASE:-dify}
158.   PGVECTOR_MIN_CONNECTION: ${PGVECTOR_MIN_CONNECTION:-1}
159.   PGVECTOR_MAX_CONNECTION: ${PGVECTOR_MAX_CONNECTION:-5}
160.   PGVECTOR_PG_BIGM: ${PGVECTOR_PG_BIGM:-false}
161.   PGVECTOR_PG_BIGM_VERSION: ${PGVECTOR_PG_BIGM_VERSION:-1.2-20240606}
162.   PGVECTO_RS_HOST: ${PGVECTO_RS_HOST:-pgvecto-rs}
163.   PGVECTO_RS_PORT: ${PGVECTO_RS_PORT:-5432}
164.   PGVECTO_RS_USER: ${PGVECTO_RS_USER:-postgres}
165.   PGVECTO_RS_PASSWORD: ${PGVECTO_RS_PASSWORD:-difyai123456}
166.   PGVECTO_RS_DATABASE: ${PGVECTO_RS_DATABASE:-dify}
167.   ANALYTICDB_KEY_ID: ${ANALYTICDB_KEY_ID:-your-ak}
168.   ANALYTICDB_KEY_SECRET: ${ANALYTICDB_KEY_SECRET:-your-sk}
169.   ANALYTICDB_REGION_ID: ${ANALYTICDB_REGION_ID:-cn-hangzhou}
170.   ANALYTICDB_INSTANCE_ID: ${ANALYTICDB_INSTANCE_ID:-gp-ab123456}
171.   ANALYTICDB_ACCOUNT: ${ANALYTICDB_ACCOUNT:-testaccount}
172.   ANALYTICDB_PASSWORD: ${ANALYTICDB_PASSWORD:-testpassword}
173.   ANALYTICDB_NAMESPACE: ${ANALYTICDB_NAMESPACE:-dify}
174.   ANALYTICDB_NAMESPACE_PASSWORD: ${ANALYTICDB_NAMESPACE_PASSWORD:-difypassword}
175.   ANALYTICDB_HOST: ${ANALYTICDB_HOST:-gp-test.aliyuncs.com}
176.   ANALYTICDB_PORT: ${ANALYTICDB_PORT:-5432}
177.   ANALYTICDB_MIN_CONNECTION: ${ANALYTICDB_MIN_CONNECTION:-1}
178.   ANALYTICDB_MAX_CONNECTION: ${ANALYTICDB_MAX_CONNECTION:-5}
179.   TIDB_VECTOR_HOST: ${TIDB_VECTOR_HOST:-tidb}
180.   TIDB_VECTOR_PORT: ${TIDB_VECTOR_PORT:-4000}
181.   TIDB_VECTOR_USER: ${TIDB_VECTOR_USER:-}
182.   TIDB_VECTOR_PASSWORD: ${TIDB_VECTOR_PASSWORD:-}
183.   TIDB_VECTOR_DATABASE: ${TIDB_VECTOR_DATABASE:-dify}
184.   TIDB_ON_QDRANT_URL: ${TIDB_ON_QDRANT_URL:-http://127.0.0.1}
185.   TIDB_ON_QDRANT_API_KEY: ${TIDB_ON_QDRANT_API_KEY:-dify}
186.   TIDB_ON_QDRANT_CLIENT_TIMEOUT: ${TIDB_ON_QDRANT_CLIENT_TIMEOUT:-20}
187.   TIDB_ON_QDRANT_GRPC_ENABLED: ${TIDB_ON_QDRANT_GRPC_ENABLED:-false}
188.   TIDB_ON_QDRANT_GRPC_PORT: ${TIDB_ON_QDRANT_GRPC_PORT:-6334}
189.   TIDB_PUBLIC_KEY: ${TIDB_PUBLIC_KEY:-dify}
190.   TIDB_PRIVATE_KEY: ${TIDB_PRIVATE_KEY:-dify}
191.   TIDB_API_URL: ${TIDB_API_URL:-http://127.0.0.1}
192.   TIDB_IAM_API_URL: ${TIDB_IAM_API_URL:-http://127.0.0.1}
193.   TIDB_REGION: ${TIDB_REGION:-regions/aws-us-east-1}
194.   TIDB_PROJECT_ID: ${TIDB_PROJECT_ID:-dify}
195.   TIDB_SPEND_LIMIT: ${TIDB_SPEND_LIMIT:-100}
196.   CHROMA_HOST: ${CHROMA_HOST:-127.0.0.1}
197.   CHROMA_PORT: ${CHROMA_PORT:-8000}
198.   CHROMA_TENANT: ${CHROMA_TENANT:-default_tenant}
199.   CHROMA_DATABASE: ${CHROMA_DATABASE:-default_database}
200.   CHROMA_AUTH_PROVIDER: ${CHROMA_AUTH_PROVIDER:-chromadb.auth.token_authn.TokenAuthClientProvider}
201.   CHROMA_AUTH_CREDENTIALS: ${CHROMA_AUTH_CREDENTIALS:-}
202.   ORACLE_USER: ${ORACLE_USER:-dify}
203.   ORACLE_PASSWORD: ${ORACLE_PASSWORD:-dify}
204.   ORACLE_DSN: ${ORACLE_DSN:-oracle:1521/FREEPDB1}
205.   ORACLE_CONFIG_DIR: ${ORACLE_CONFIG_DIR:-/app/api/storage/wallet}
206.   ORACLE_WALLET_LOCATION: ${ORACLE_WALLET_LOCATION:-/app/api/storage/wallet}
207.   ORACLE_WALLET_PASSWORD: ${ORACLE_WALLET_PASSWORD:-dify}
208.   ORACLE_IS_AUTONOMOUS: ${ORACLE_IS_AUTONOMOUS:-false}
209.   RELYT_HOST: ${RELYT_HOST:-db}
210.   RELYT_PORT: ${RELYT_PORT:-5432}
211.   RELYT_USER: ${RELYT_USER:-postgres}
212.   RELYT_PASSWORD: ${RELYT_PASSWORD:-difyai123456}
213.   RELYT_DATABASE: ${RELYT_DATABASE:-postgres}
214.   OPENSEARCH_HOST: ${OPENSEARCH_HOST:-opensearch}
215.   OPENSEARCH_PORT: ${OPENSEARCH_PORT:-9200}
216.   OPENSEARCH_USER: ${OPENSEARCH_USER:-admin}
217.   OPENSEARCH_PASSWORD: ${OPENSEARCH_PASSWORD:-admin}
218.   OPENSEARCH_SECURE: ${OPENSEARCH_SECURE:-true}
219.   TENCENT_VECTOR_DB_URL: ${TENCENT_VECTOR_DB_URL:-http://127.0.0.1}
220.   TENCENT_VECTOR_DB_API_KEY: ${TENCENT_VECTOR_DB_API_KEY:-dify}
221.   TENCENT_VECTOR_DB_TIMEOUT: ${TENCENT_VECTOR_DB_TIMEOUT:-30}
222.   TENCENT_VECTOR_DB_USERNAME: ${TENCENT_VECTOR_DB_USERNAME:-dify}
223.   TENCENT_VECTOR_DB_DATABASE: ${TENCENT_VECTOR_DB_DATABASE:-dify}
224.   TENCENT_VECTOR_DB_SHARD: ${TENCENT_VECTOR_DB_SHARD:-1}
225.   TENCENT_VECTOR_DB_REPLICAS: ${TENCENT_VECTOR_DB_REPLICAS:-2}
226.   ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-0.0.0.0}
227.   ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
228.   ELASTICSEARCH_USERNAME: ${ELASTICSEARCH_USERNAME:-elastic}
229.   ELASTICSEARCH_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic}
230.   KIBANA_PORT: ${KIBANA_PORT:-5601}
231.   BAIDU_VECTOR_DB_ENDPOINT: ${BAIDU_VECTOR_DB_ENDPOINT:-http://127.0.0.1:5287}
232.   BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS: ${BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS:-30000}
233.   BAIDU_VECTOR_DB_ACCOUNT: ${BAIDU_VECTOR_DB_ACCOUNT:-root}
234.   BAIDU_VECTOR_DB_API_KEY: ${BAIDU_VECTOR_DB_API_KEY:-dify}
235.   BAIDU_VECTOR_DB_DATABASE: ${BAIDU_VECTOR_DB_DATABASE:-dify}
236.   BAIDU_VECTOR_DB_SHARD: ${BAIDU_VECTOR_DB_SHARD:-1}
237.   BAIDU_VECTOR_DB_REPLICAS: ${BAIDU_VECTOR_DB_REPLICAS:-3}
238.   VIKINGDB_ACCESS_KEY: ${VIKINGDB_ACCESS_KEY:-your-ak}
239.   VIKINGDB_SECRET_KEY: ${VIKINGDB_SECRET_KEY:-your-sk}
240.   VIKINGDB_REGION: ${VIKINGDB_REGION:-cn-shanghai}
241.   VIKINGDB_HOST: ${VIKINGDB_HOST:-api-vikingdb.xxx.volces.com}
242.   VIKINGDB_SCHEMA: ${VIKINGDB_SCHEMA:-http}
243.   VIKINGDB_CONNECTION_TIMEOUT: ${VIKINGDB_CONNECTION_TIMEOUT:-30}
244.   VIKINGDB_SOCKET_TIMEOUT: ${VIKINGDB_SOCKET_TIMEOUT:-30}
245.   LINDORM_URL: ${LINDORM_URL:-http://lindorm:30070}
246.   LINDORM_USERNAME: ${LINDORM_USERNAME:-lindorm}
247.   LINDORM_PASSWORD: ${LINDORM_PASSWORD:-lindorm}
248.   OCEANBASE_VECTOR_HOST: ${OCEANBASE_VECTOR_HOST:-oceanbase}
249.   OCEANBASE_VECTOR_PORT: ${OCEANBASE_VECTOR_PORT:-2881}
250.   OCEANBASE_VECTOR_USER: ${OCEANBASE_VECTOR_USER:-root@test}
251.   OCEANBASE_VECTOR_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
252.   OCEANBASE_VECTOR_DATABASE: ${OCEANBASE_VECTOR_DATABASE:-test}
253.   OCEANBASE_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
254.   OCEANBASE_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
255.   OCEANBASE_ENABLE_HYBRID_SEARCH: ${OCEANBASE_ENABLE_HYBRID_SEARCH:-false}
256.   OPENGAUSS_HOST: ${OPENGAUSS_HOST:-opengauss}
257.   OPENGAUSS_PORT: ${OPENGAUSS_PORT:-6600}
258.   OPENGAUSS_USER: ${OPENGAUSS_USER:-postgres}
259.   OPENGAUSS_PASSWORD: ${OPENGAUSS_PASSWORD:-Dify@123}
260.   OPENGAUSS_DATABASE: ${OPENGAUSS_DATABASE:-dify}
261.   OPENGAUSS_MIN_CONNECTION: ${OPENGAUSS_MIN_CONNECTION:-1}
262.   OPENGAUSS_MAX_CONNECTION: ${OPENGAUSS_MAX_CONNECTION:-5}
263.   OPENGAUSS_ENABLE_PQ: ${OPENGAUSS_ENABLE_PQ:-false}
264.   UPSTASH_VECTOR_URL: ${UPSTASH_VECTOR_URL:-https://xxx-vector.upstash.io}
265.   UPSTASH_VECTOR_TOKEN: ${UPSTASH_VECTOR_TOKEN:-dify}
266.   TABLESTORE_ENDPOINT: ${TABLESTORE_ENDPOINT:-https://instance-name.cn-hangzhou.ots.aliyuncs.com}
267.   TABLESTORE_INSTANCE_NAME: ${TABLESTORE_INSTANCE_NAME:-instance-name}
268.   TABLESTORE_ACCESS_KEY_ID: ${TABLESTORE_ACCESS_KEY_ID:-xxx}
269.   TABLESTORE_ACCESS_KEY_SECRET: ${TABLESTORE_ACCESS_KEY_SECRET:-xxx}
270.   UPLOAD_FILE_SIZE_LIMIT: ${UPLOAD_FILE_SIZE_LIMIT:-15}
271.   UPLOAD_FILE_BATCH_LIMIT: ${UPLOAD_FILE_BATCH_LIMIT:-5}
272.   ETL_TYPE: ${ETL_TYPE:-dify}
273.   UNSTRUCTURED_API_URL: ${UNSTRUCTURED_API_URL:-}
274.   UNSTRUCTURED_API_KEY: ${UNSTRUCTURED_API_KEY:-}
275.   SCARF_NO_ANALYTICS: ${SCARF_NO_ANALYTICS:-true}
276.   PROMPT_GENERATION_MAX_TOKENS: ${PROMPT_GENERATION_MAX_TOKENS:-512}
277.   CODE_GENERATION_MAX_TOKENS: ${CODE_GENERATION_MAX_TOKENS:-1024}
278.   MULTIMODAL_SEND_FORMAT: ${MULTIMODAL_SEND_FORMAT:-base64}
279.   UPLOAD_IMAGE_FILE_SIZE_LIMIT: ${UPLOAD_IMAGE_FILE_SIZE_LIMIT:-10}
280.   UPLOAD_VIDEO_FILE_SIZE_LIMIT: ${UPLOAD_VIDEO_FILE_SIZE_LIMIT:-100}
281.   UPLOAD_AUDIO_FILE_SIZE_LIMIT: ${UPLOAD_AUDIO_FILE_SIZE_LIMIT:-50}
282.   SENTRY_DSN: ${SENTRY_DSN:-}
283.   API_SENTRY_DSN: ${API_SENTRY_DSN:-}
284.   API_SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
285.   API_SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
286.   WEB_SENTRY_DSN: ${WEB_SENTRY_DSN:-}
287.   NOTION_INTEGRATION_TYPE: ${NOTION_INTEGRATION_TYPE:-public}
288.   NOTION_CLIENT_SECRET: ${NOTION_CLIENT_SECRET:-}
289.   NOTION_CLIENT_ID: ${NOTION_CLIENT_ID:-}
290.   NOTION_INTERNAL_SECRET: ${NOTION_INTERNAL_SECRET:-}
291.   MAIL_TYPE: ${MAIL_TYPE:-resend}
292.   MAIL_DEFAULT_SEND_FROM: ${MAIL_DEFAULT_SEND_FROM:-}
293.   RESEND_API_URL: ${RESEND_API_URL:-https://api.resend.com}
294.   RESEND_API_KEY: ${RESEND_API_KEY:-your-resend-api-key}
295.   SMTP_SERVER: ${SMTP_SERVER:-}
296.   SMTP_PORT: ${SMTP_PORT:-465}
297.   SMTP_USERNAME: ${SMTP_USERNAME:-}
298.   SMTP_PASSWORD: ${SMTP_PASSWORD:-}
299.   SMTP_USE_TLS: ${SMTP_USE_TLS:-true}
300.   SMTP_OPPORTUNISTIC_TLS: ${SMTP_OPPORTUNISTIC_TLS:-false}
301.   INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-4000}
302.   INVITE_EXPIRY_HOURS: ${INVITE_EXPIRY_HOURS:-72}
303.   RESET_PASSWORD_TOKEN_EXPIRY_MINUTES: ${RESET_PASSWORD_TOKEN_EXPIRY_MINUTES:-5}
304.   CODE_EXECUTION_ENDPOINT: ${CODE_EXECUTION_ENDPOINT:-http://sandbox:8194}
305.   CODE_EXECUTION_API_KEY: ${CODE_EXECUTION_API_KEY:-dify-sandbox}
306.   CODE_MAX_NUMBER: ${CODE_MAX_NUMBER:-9223372036854775807}
307.   CODE_MIN_NUMBER: ${CODE_MIN_NUMBER:--9223372036854775808}
308.   CODE_MAX_DEPTH: ${CODE_MAX_DEPTH:-5}
309.   CODE_MAX_PRECISION: ${CODE_MAX_PRECISION:-20}
310.   CODE_MAX_STRING_LENGTH: ${CODE_MAX_STRING_LENGTH:-80000}
311.   CODE_MAX_STRING_ARRAY_LENGTH: ${CODE_MAX_STRING_ARRAY_LENGTH:-30}
312.   CODE_MAX_OBJECT_ARRAY_LENGTH: ${CODE_MAX_OBJECT_ARRAY_LENGTH:-30}
313.   CODE_MAX_NUMBER_ARRAY_LENGTH: ${CODE_MAX_NUMBER_ARRAY_LENGTH:-1000}
314.   CODE_EXECUTION_CONNECT_TIMEOUT: ${CODE_EXECUTION_CONNECT_TIMEOUT:-10}
315.   CODE_EXECUTION_READ_TIMEOUT: ${CODE_EXECUTION_READ_TIMEOUT:-60}
316.   CODE_EXECUTION_WRITE_TIMEOUT: ${CODE_EXECUTION_WRITE_TIMEOUT:-10}
317.   TEMPLATE_TRANSFORM_MAX_LENGTH: ${TEMPLATE_TRANSFORM_MAX_LENGTH:-80000}
318.   WORKFLOW_MAX_EXECUTION_STEPS: ${WORKFLOW_MAX_EXECUTION_STEPS:-500}
319.   WORKFLOW_MAX_EXECUTION_TIME: ${WORKFLOW_MAX_EXECUTION_TIME:-1200}
320.   WORKFLOW_CALL_MAX_DEPTH: ${WORKFLOW_CALL_MAX_DEPTH:-5}
321.   MAX_VARIABLE_SIZE: ${MAX_VARIABLE_SIZE:-204800}
322.   WORKFLOW_PARALLEL_DEPTH_LIMIT: ${WORKFLOW_PARALLEL_DEPTH_LIMIT:-3}
323.   WORKFLOW_FILE_UPLOAD_LIMIT: ${WORKFLOW_FILE_UPLOAD_LIMIT:-10}
324.   HTTP_REQUEST_NODE_MAX_BINARY_SIZE: ${HTTP_REQUEST_NODE_MAX_BINARY_SIZE:-10485760}
325.   HTTP_REQUEST_NODE_MAX_TEXT_SIZE: ${HTTP_REQUEST_NODE_MAX_TEXT_SIZE:-1048576}
326.   HTTP_REQUEST_NODE_SSL_VERIFY: ${HTTP_REQUEST_NODE_SSL_VERIFY:-True}
327.   SSRF_PROXY_HTTP_URL: ${SSRF_PROXY_HTTP_URL:-http://ssrf_proxy:3128}
328.   SSRF_PROXY_HTTPS_URL: ${SSRF_PROXY_HTTPS_URL:-http://ssrf_proxy:3128}
329.   LOOP_NODE_MAX_COUNT: ${LOOP_NODE_MAX_COUNT:-100}
330.   MAX_TOOLS_NUM: ${MAX_TOOLS_NUM:-10}
331.   MAX_PARALLEL_LIMIT: ${MAX_PARALLEL_LIMIT:-10}
332.   MAX_ITERATIONS_NUM: ${MAX_ITERATIONS_NUM:-5}
333.   TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
334.   PGUSER: ${PGUSER:-${DB_USERNAME}}
335.   POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-${DB_PASSWORD}}
336.   POSTGRES_DB: ${POSTGRES_DB:-${DB_DATABASE}}
337.   PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
338.   SANDBOX_API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}
339.   SANDBOX_GIN_MODE: ${SANDBOX_GIN_MODE:-release}
340.   SANDBOX_WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}
341.   SANDBOX_ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true}
342.   SANDBOX_HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}
343.   SANDBOX_HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}
344.   SANDBOX_PORT: ${SANDBOX_PORT:-8194}
345.   WEAVIATE_PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate}
346.   WEAVIATE_QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25}
347.   WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-true}
348.   WEAVIATE_DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none}
349.   WEAVIATE_CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1}
350.   WEAVIATE_AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true}
351.   WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
352.   WEAVIATE_AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
353.   WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
354.   WEAVIATE_AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
355.   CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
356.   CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
357.   CHROMA_IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
358.   ORACLE_PWD: ${ORACLE_PWD:-Dify123456}
359.   ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}
360.   ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision}
361.   ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000}
362.   ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296}
363.   ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000}
364.   MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}
365.   MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}
366.   ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
367.   MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
368.   MILVUS_AUTHORIZATION_ENABLED: ${MILVUS_AUTHORIZATION_ENABLED:-true}
369.   PGVECTOR_PGUSER: ${PGVECTOR_PGUSER:-postgres}
370.   PGVECTOR_POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
371.   PGVECTOR_POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
372.   PGVECTOR_PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
373.   OPENSEARCH_DISCOVERY_TYPE: ${OPENSEARCH_DISCOVERY_TYPE:-single-node}
374.   OPENSEARCH_BOOTSTRAP_MEMORY_LOCK: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true}
375.   OPENSEARCH_JAVA_OPTS_MIN: ${OPENSEARCH_JAVA_OPTS_MIN:-512m}
376.   OPENSEARCH_JAVA_OPTS_MAX: ${OPENSEARCH_JAVA_OPTS_MAX:-1024m}
377.   OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123}
378.   OPENSEARCH_MEMLOCK_SOFT: ${OPENSEARCH_MEMLOCK_SOFT:--1}
379.   OPENSEARCH_MEMLOCK_HARD: ${OPENSEARCH_MEMLOCK_HARD:--1}
380.   OPENSEARCH_NOFILE_SOFT: ${OPENSEARCH_NOFILE_SOFT:-65536}
381.   OPENSEARCH_NOFILE_HARD: ${OPENSEARCH_NOFILE_HARD:-65536}
382.   NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
383.   NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
384.   NGINX_PORT: ${NGINX_PORT:-80}
385.   NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}
386.   NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
387.   NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
388.   NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
389.   NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
390.   NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M}
391.   NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
392.   NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s}
393.   NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}
394.   NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}
395.   CERTBOT_EMAIL: ${CERTBOT_EMAIL:-your_email@example.com}
396.   CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-your_domain.com}
397.   CERTBOT_OPTIONS: ${CERTBOT_OPTIONS:-}
398.   SSRF_HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
399.   SSRF_COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid}
400.   SSRF_REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}
401.   SSRF_SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}
402.   SSRF_DEFAULT_TIME_OUT: ${SSRF_DEFAULT_TIME_OUT:-5}
403.   SSRF_DEFAULT_CONNECT_TIME_OUT: ${SSRF_DEFAULT_CONNECT_TIME_OUT:-5}
404.   SSRF_DEFAULT_READ_TIME_OUT: ${SSRF_DEFAULT_READ_TIME_OUT:-5}
405.   SSRF_DEFAULT_WRITE_TIME_OUT: ${SSRF_DEFAULT_WRITE_TIME_OUT:-5}
406.   EXPOSE_NGINX_PORT: ${EXPOSE_NGINX_PORT:-80}
407.   EXPOSE_NGINX_SSL_PORT: ${EXPOSE_NGINX_SSL_PORT:-443}
408.   POSITION_TOOL_PINS: ${POSITION_TOOL_PINS:-}
409.   POSITION_TOOL_INCLUDES: ${POSITION_TOOL_INCLUDES:-}
410.   POSITION_TOOL_EXCLUDES: ${POSITION_TOOL_EXCLUDES:-}
411.   POSITION_PROVIDER_PINS: ${POSITION_PROVIDER_PINS:-}
412.   POSITION_PROVIDER_INCLUDES: ${POSITION_PROVIDER_INCLUDES:-}
413.   POSITION_PROVIDER_EXCLUDES: ${POSITION_PROVIDER_EXCLUDES:-}
414.   CSP_WHITELIST: ${CSP_WHITELIST:-}
415.   CREATE_TIDB_SERVICE_JOB_ENABLED: ${CREATE_TIDB_SERVICE_JOB_ENABLED:-false}
416.   MAX_SUBMIT_COUNT: ${MAX_SUBMIT_COUNT:-100}
417.   TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-10}
418.   DB_PLUGIN_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin}
419.   EXPOSE_PLUGIN_DAEMON_PORT: ${EXPOSE_PLUGIN_DAEMON_PORT:-5002}
420.   PLUGIN_DAEMON_PORT: ${PLUGIN_DAEMON_PORT:-5002}
421.   PLUGIN_DAEMON_KEY: ${PLUGIN_DAEMON_KEY:-lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi}
422.   PLUGIN_DAEMON_URL: ${PLUGIN_DAEMON_URL:-http://plugin_daemon:5002}
423.   PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
424.   PLUGIN_PPROF_ENABLED: ${PLUGIN_PPROF_ENABLED:-false}
425.   PLUGIN_DEBUGGING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0}
426.   PLUGIN_DEBUGGING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003}
427.   EXPOSE_PLUGIN_DEBUGGING_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
428.   EXPOSE_PLUGIN_DEBUGGING_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
429.   PLUGIN_DIFY_INNER_API_KEY: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
430.   PLUGIN_DIFY_INNER_API_URL: ${PLUGIN_DIFY_INNER_API_URL:-http://api:5001}
431.   ENDPOINT_URL_TEMPLATE: ${ENDPOINT_URL_TEMPLATE:-http://localhost/e/{hook_id}}
432.   MARKETPLACE_ENABLED: ${MARKETPLACE_ENABLED:-true}
433.   MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai}
434.   FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
435.   PLUGIN_PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
436.   PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
437.   PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
439. services:
440.   # API service
441.   api:
442.     image: langgenius/dify-api:1.1.4
443.     restart: always
444.     environment:
445.       # Use the shared environment variables.
446.       <<: *shared-api-worker-env
447.       # Startup mode, 'api' starts the API server.
448.       MODE: api
449.       SENTRY_DSN: ${API_SENTRY_DSN:-}
450.       SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
451.       SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
452.       PLUGIN_REMOTE_INSTALL_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost}
453.       PLUGIN_REMOTE_INSTALL_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}
454.       PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
455.       INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
456.     depends_on:
457.       - db
458.       - redis
459.     volumes:
460.       # Mount the storage directory to the container, for storing user files.
461.       - ./volumes/app/storage:/app/api/storage
462.     networks:
463.       - ssrf_proxy_network
464.       - default
465.     command: >
466.       /wait-for-it.sh db:5432 -t 30 -- echo "DB is up" &&
467.       /wait-for-it.sh redis:6379 -t 30 -- echo "Redis is up"
469.   # worker service
470.   # The Celery worker for processing the queue.
471.   worker:
472.     image: langgenius/dify-api:1.1.4
473.     restart: always
474.     environment:
475.       # Use the shared environment variables.
476.       <<: *shared-api-worker-env
477.       # Startup mode, 'worker' starts the Celery worker for processing the queue.
478.       MODE: worker
479.       SENTRY_DSN: ${API_SENTRY_DSN:-}
480.       SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0}
481.       SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0}
482.       PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
483.       INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
484.     depends_on:
485.       - db
486.       - redis
487.     volumes:
488.       # Mount the storage directory to the container, for storing user files.
489.       - ./volumes/app/storage:/app/api/storage
490.     networks:
491.       - ssrf_proxy_network
492.       - default
493.     command: >
494.       /wait-for-it.sh db:5432 -t 30 -- echo "DB is up" &&
495.       /wait-for-it.sh redis:6379 -t 30 -- echo "Redis is up"
497.   # Frontend web application.
498.   web:
499.     image: langgenius/dify-web:1.1.3
500.     restart: always
501.     environment:
502.       CONSOLE_API_URL: ${CONSOLE_API_URL:-}
503.       APP_API_URL: ${APP_API_URL:-}
504.       SENTRY_DSN: ${WEB_SENTRY_DSN:-}
505.       NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0}
506.       TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000}
507.       CSP_WHITELIST: ${CSP_WHITELIST:-}
508.       MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai}
509.       MARKETPLACE_URL: ${MARKETPLACE_URL:-https://marketplace.dify.ai}
510.       TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-}
511.       INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-}
512.       PM2_INSTANCES: ${PM2_INSTANCES:-2}
513.       LOOP_NODE_MAX_COUNT: ${LOOP_NODE_MAX_COUNT:-100}
514.       MAX_TOOLS_NUM: ${MAX_TOOLS_NUM:-10}
515.       MAX_PARALLEL_LIMIT: ${MAX_PARALLEL_LIMIT:-10}
516.       MAX_ITERATIONS_NUM: ${MAX_ITERATIONS_NUM:-5}
518.   # The postgres database.
519.   db:
520.     image: postgres:15-alpine
521.     restart: always
522.     environment:
523.       PGUSER: ${PGUSER:-postgres}
524.       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-difyai123456}
525.       POSTGRES_DB: ${POSTGRES_DB:-dify}
526.       PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata}
527.     command: >
528.       postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}'
529.                -c 'shared_buffers=${POSTGRES_SHARED_BUFFERS:-128MB}'
530.                -c 'work_mem=${POSTGRES_WORK_MEM:-4MB}'
531.                -c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}'
532.                -c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}'
533.     volumes:
534.       - ./volumes/db/data:/var/lib/postgresql/data
535.     healthcheck:
536.       test: [ 'CMD', 'pg_isready' ]
537.       interval: 1s
538.       timeout: 3s
539.       retries: 30
541.   # The redis cache.
542.   redis:
543.     image: redis:6-alpine
544.     restart: always
545.     environment:
546.       REDISCLI_AUTH: ${REDIS_PASSWORD:-difyai123456}
547.     volumes:
548.       # Mount the redis data directory to the container.
549.       - ./volumes/redis/data:/data
550.     # Set the redis password when startup redis server.
551.     command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456}
552.     healthcheck:
553.       test: [ 'CMD', 'redis-cli', 'ping' ]
554.    
556.   # The DifySandbox
557.   sandbox:
558.     image: langgenius/dify-sandbox:0.2.11
559.     restart: always
560.     environment:
561.       # The DifySandbox configurations
562.       # Make sure you are changing this key for your deployment with a strong key.
563.       # You can generate a strong key using `openssl rand -base64 42`.
564.       API_KEY: ${SANDBOX_API_KEY:-dify-sandbox}
565.       GIN_MODE: ${SANDBOX_GIN_MODE:-release}
566.       WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15}
567.       ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true}
568.       HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128}
569.       HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128}
570.       SANDBOX_PORT: ${SANDBOX_PORT:-8194}
571.     volumes:
572.       - ./volumes/sandbox/dependencies:/dependencies
573.       - ./volumes/sandbox/conf:/conf
574.     healthcheck:
575.       test: [ 'CMD', 'curl', '-f', 'http://localhost:8194/health' ]
576.     networks:
577.       - ssrf_proxy_network
579.   # plugin daemon
580.   plugin_daemon:
581.     image: langgenius/dify-plugin-daemon:0.0.7-local
582.     restart: always
583.     environment:
584.       # Use the shared environment variables.
585.       <<: *shared-api-worker-env
586.       DB_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin}
587.       SERVER_PORT: ${PLUGIN_DAEMON_PORT:-5002}
588.       SERVER_KEY: ${PLUGIN_DAEMON_KEY:-lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi}
589.       MAX_PLUGIN_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800}
590.       PPROF_ENABLED: ${PLUGIN_PPROF_ENABLED:-false}
591.       DIFY_INNER_API_URL: ${PLUGIN_DIFY_INNER_API_URL:-http://api:5001}
592.       DIFY_INNER_API_KEY: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1}
593.       PLUGIN_REMOTE_INSTALLING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0}
594.       PLUGIN_REMOTE_INSTALLING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003}
595.       PLUGIN_WORKING_PATH: ${PLUGIN_WORKING_PATH:-/app/storage/cwd}
596.       FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true}
597.       PYTHON_ENV_INIT_TIMEOUT: ${PLUGIN_PYTHON_ENV_INIT_TIMEOUT:-120}
598.       PLUGIN_MAX_EXECUTION_TIMEOUT: ${PLUGIN_MAX_EXECUTION_TIMEOUT:-600}
599.       PIP_MIRROR_URL: ${PIP_MIRROR_URL:-}
600.     ports:
601.       - "${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}:${PLUGIN_DEBUGGING_PORT:-5003}"
602.     volumes:
603.       - ./volumes/plugin_daemon:/app/storage
604.     depends_on:
605.       - db
606.     command: >
607.        /wait-for-it.sh db:5432 -t 30 -- /bin/bash -c "/app/entrypoint.sh"
609.   # ssrf_proxy server
610.   # for more information, please refer to
611.   # https://docs.dify.ai/learn-more/faq/install-faq#id-18.-why-is-ssrf_proxy-needed
612.   ssrf_proxy:
613.     image: ubuntu/squid:latest
614.     restart: always
615.     volumes:
616.       - ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template
617.       - ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh
618.     entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
619.     environment:
620.       # pls clearly modify the squid env vars to fit your network environment.
621.       HTTP_PORT: ${SSRF_HTTP_PORT:-3128}
622.       COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid}
623.       REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194}
624.       SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox}
625.       SANDBOX_PORT: ${SANDBOX_PORT:-8194}
626.     networks:
627.       - ssrf_proxy_network
628.       - default
630.   # Certbot service
631.   # use `docker-compose --profile certbot up` to start the certbot service.
632.   certbot:
633.     image: certbot/certbot
634.     profiles:
635.       - certbot
636.     volumes:
637.       - ./volumes/certbot/conf:/etc/letsencrypt
638.       - ./volumes/certbot/www:/var/www/html
639.       - ./volumes/certbot/logs:/var/log/letsencrypt
640.       - ./volumes/certbot/conf/live:/etc/letsencrypt/live
641.       - ./certbot/update-cert.template.txt:/update-cert.template.txt
642.       - ./certbot/docker-entrypoint.sh:/docker-entrypoint.sh
643.     environment:
644.       - CERTBOT_EMAIL=${CERTBOT_EMAIL}
645.       - CERTBOT_DOMAIN=${CERTBOT_DOMAIN}
646.       - CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-}
647.     entrypoint: [ '/docker-entrypoint.sh' ]
648.     command: [ 'tail', '-f', '/dev/null' ]
650.   # The nginx reverse proxy.
651.   # used for reverse proxying the API service and Web service.
652.   nginx:
653.     image: nginx:latest
654.     restart: always
655.     volumes:
656.       - ./nginx/nginx.conf.template:/etc/nginx/nginx.conf.template
657.       - ./nginx/proxy.conf.template:/etc/nginx/proxy.conf.template
658.       - ./nginx/https.conf.template:/etc/nginx/https.conf.template
659.       - ./nginx/conf.d:/etc/nginx/conf.d
660.       - ./nginx/docker-entrypoint.sh:/docker-entrypoint-mount.sh
661.       - ./nginx/ssl:/etc/ssl # cert dir (legacy)
662.       - ./volumes/certbot/conf/live:/etc/letsencrypt/live # cert dir (with certbot container)
663.       - ./volumes/certbot/conf:/etc/letsencrypt
664.       - ./volumes/certbot/www:/var/www/html
665.     entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ]
666.     environment:
667.       NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
668.       NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false}
669.       NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443}
670.       NGINX_PORT: ${NGINX_PORT:-80}
671.       # You're required to add your own SSL certificates/keys to the `./nginx/ssl` directory
672.       # and modify the env vars below in .env if HTTPS_ENABLED is true.
673.       NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt}
674.       NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key}
675.       NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3}
676.       NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto}
677.       NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M}
678.       NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65}
679.       NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s}
680.       NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s}
681.       NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false}
682.       CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-}
683.     depends_on:
684.       - api
685.       - web
686.     ports:
687.       - '${EXPOSE_NGINX_PORT:-80}:${NGINX_PORT:-80}'
688.       - '${EXPOSE_NGINX_SSL_PORT:-443}:${NGINX_SSL_PORT:-443}'
691.   # The Weaviate vector store.
692.   weaviate:
693.     image: semitechnologies/weaviate:1.19.0
694.     profiles:
695.       - ''
696.       - weaviate
697.     restart: always
698.     volumes:
699.       # Mount the Weaviate data directory to the con tainer.
700.       - ./volumes/weaviate:/var/lib/weaviate
701.     environment:
702.       # The Weaviate configurations
703.       # You can refer to the [Weaviate](https://weaviate.io/developers/weaviate/config-refs/env-vars) documentation for more information.
704.       PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate}
705.       QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25}
706.       AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-false}
707.       DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none}
708.       CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1}
709.       AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true}
710.       AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih}
711.       AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai}
712.       AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true}
713.       AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai}
715.   # Qdrant vector store.
716.   # (if used, you need to set VECTOR_STORE to qdrant in the api & worker service.)
717.   qdrant:
718.     image: langgenius/qdrant:v1.7.3
719.     profiles:
720.       - qdrant
721.     restart: always
722.     volumes:
723.       - ./volumes/qdrant:/qdrant/storage
724.     environment:
725.       QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456}
727.   # The Couchbase vector store.
728.   couchbase-server:
729.     build: ./couchbase-server
730.     profiles:
731.       - couchbase
732.     restart: always
733.     environment:
734.       - CLUSTER_NAME=dify_search
735.       - COUCHBASE_ADMINISTRATOR_USERNAME=${COUCHBASE_USER:-Administrator}
736.       - COUCHBASE_ADMINISTRATOR_PASSWORD=${COUCHBASE_PASSWORD:-password}
737.       - COUCHBASE_BUCKET=${COUCHBASE_BUCKET_NAME:-Embeddings}
738.       - COUCHBASE_BUCKET_RAMSIZE=512
739.       - COUCHBASE_RAM_SIZE=2048
740.       - COUCHBASE_EVENTING_RAM_SIZE=512
741.       - COUCHBASE_INDEX_RAM_SIZE=512
742.       - COUCHBASE_FTS_RAM_SIZE=1024
743.     hostname: couchbase-server
744.     container_name: couchbase-server
745.     working_dir: /opt/couchbase
746.     stdin_open: true
747.     tty: true
748.     entrypoint: [ "" ]
749.     command: sh -c "/opt/couchbase/init/init-cbserver.sh"
750.     volumes:
751.       - ./volumes/couchbase/data:/opt/couchbase/var/lib/couchbase/data
752.     healthcheck:
753.       # ensure bucket was created before proceeding
754.       test: [ "CMD-SHELL", "curl -s -f -u Administrator:password http://localhost:8091/pools/default/buckets | grep -q '\\[{' || exit 1" ]
755.       interval: 10s
756.       retries: 10
757.       start_period: 30s
758.       timeout: 10s
760.   # The pgvector vector database.
761.   pgvector:
762.     image: pgvector/pgvector:pg16
763.     profiles:
764.       - pgvector
765.     restart: always
766.     environment:
767.       PGUSER: ${PGVECTOR_PGUSER:-postgres}
768.       # The password for the default postgres user.
769.       POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
770.       # The name of the default postgres database.
771.       POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
772.       # postgres data directory
773.       PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
774.       # pg_bigm module for full text search
775.       PG_BIGM: ${PGVECTOR_PG_BIGM:-false}
776.       PG_BIGM_VERSION: ${PGVECTOR_PG_BIGM_VERSION:-1.2-20240606}
777.     volumes:
778.       - ./volumes/pgvector/data:/var/lib/postgresql/data
779.       - ./pgvector/docker-entrypoint.sh:/docker-entrypoint.sh
780.     entrypoint: [ '/docker-entrypoint.sh' ]
781.     healthcheck:
782.       test: [ 'CMD', 'pg_isready' ]
783.       interval: 1s
784.       timeout: 3s
785.       retries: 30
787.   # pgvecto-rs vector store
788.   pgvecto-rs:
789.     image: tensorchord/pgvecto-rs:pg16-v0.3.0
790.     profiles:
791.       - pgvecto-rs
792.     restart: always
793.     environment:
794.       PGUSER: ${PGVECTOR_PGUSER:-postgres}
795.       # The password for the default postgres user.
796.       POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456}
797.       # The name of the default postgres database.
798.       POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify}
799.       # postgres data directory
800.       PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata}
801.     volumes:
802.       - ./volumes/pgvecto_rs/data:/var/lib/postgresql/data
803.     healthcheck:
804.       test: [ 'CMD', 'pg_isready' ]
805.       interval: 1s
806.       timeout: 3s
807.       retries: 30
809.   # Chroma vector database
810.   chroma:
811.     image: ghcr.io/chroma-core/chroma:0.5.20
812.     profiles:
813.       - chroma
814.     restart: always
815.     volumes:
816.       - ./volumes/chroma:/chroma/chroma
817.     environment:
818.       CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456}
819.       CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider}
820.       IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE}
822.   # OceanBase vector database
823.   oceanbase:
824.     image: oceanbase/oceanbase-ce:4.3.5.1-101000042025031818
825.     container_name: oceanbase
826.     profiles:
827.       - oceanbase
828.     restart: always
829.     volumes:
830.       - ./volumes/oceanbase/data:/root/ob
831.       - ./volumes/oceanbase/conf:/root/.obd/cluster
832.       - ./volumes/oceanbase/init.d:/root/boot/init.d
833.     environment:
834.       OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G}
835.       OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
836.       OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456}
837.       OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai}
838.       MODE: MINI
839.     ports:
840.       - "${OCEANBASE_VECTOR_PORT:-2881}:2881"
842.   # Oracle vector database
843.   oracle:
844.     image: container-registry.oracle.com/database/free:latest
845.     profiles:
846.       - oracle
847.     restart: always
848.     volumes:
849.       - source: oradata
850.         type: volume
851.         target: /opt/oracle/oradata
852.       - ./startupscripts:/opt/oracle/scripts/startup
853.     environment:
854.       ORACLE_PWD: ${ORACLE_PWD:-Dify123456}
855.       ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8}
857.   # Milvus vector database services
858.   etcd:
859.     container_name: milvus-etcd
860.     image: quay.io/coreos/etcd:v3.5.5
861.     profiles:
862.       - milvus
863.     environment:
864.       ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision}
865.       ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000}
866.       ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296}
867.       ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000}
868.     volumes:
869.       - ./volumes/milvus/etcd:/etcd
870.     command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd
871.     healthcheck:
872.       test: [ 'CMD', 'etcdctl', 'endpoint', 'health' ]
873.       interval: 30s
874.       timeout: 20s
875.       retries: 3
876.     networks:
877.       - milvus
879.   minio:
880.     container_name: milvus-minio
881.     image: minio/minio:RELEASE.2023-03-20T20-16-18Z
882.     profiles:
883.       - milvus
884.     environment:
885.       MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin}
886.       MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin}
887.     volumes:
888.       - ./volumes/milvus/minio:/minio_data
889.     command: minio server /minio_data --console-address ":9001"
890.     healthcheck:
891.       test: [ 'CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live' ]
892.       interval: 30s
893.       timeout: 20s
894.       retries: 3
895.     networks:
896.       - milvus
898.   milvus-standalone:
899.     container_name: milvus-standalone
900.     image: milvusdb/milvus:v2.5.0-beta
901.     profiles:
902.       - milvus
903.     command: [ 'milvus', 'run', 'standalone' ]
904.     environment:
905.       ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379}
906.       MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000}
907.       common.security.authorizationEnabled: ${MILVUS_AUTHORIZATION_ENABLED:-true}
908.     volumes:
909.       - ./volumes/milvus/milvus:/var/lib/milvus
910.     healthcheck:
911.       test: [ 'CMD', 'curl', '-f', 'http://localhost:9091/healthz' ]
912.       interval: 30s
913.       start_period: 90s
914.       timeout: 20s
915.       retries: 3
916.     depends_on:
917.       - etcd
918.       - minio
919.     ports:
920.       - 19530:19530
921.       - 9091:9091
922.     networks:
923.       - milvus
925.   # Opensearch vector database
926.   opensearch:
927.     container_name: opensearch
928.     image: opensearchproject/opensearch:latest
929.     profiles:
930.       - opensearch
931.     environment:
932.       discovery.type: ${OPENSEARCH_DISCOVERY_TYPE:-single-node}
933.       bootstrap.memory_lock: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true}
934.       OPENSEARCH_JAVA_OPTS: -Xms${OPENSEARCH_JAVA_OPTS_MIN:-512m} -Xmx${OPENSEARCH_JAVA_OPTS_MAX:-1024m}
935.       OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123}
936.     ulimits:
937.       memlock:
938.         soft: ${OPENSEARCH_MEMLOCK_SOFT:--1}
939.         hard: ${OPENSEARCH_MEMLOCK_HARD:--1}
940.       nofile:
941.         soft: ${OPENSEARCH_NOFILE_SOFT:-65536}
942.         hard: ${OPENSEARCH_NOFILE_HARD:-65536}
943.     volumes:
944.       - ./volumes/opensearch/data:/usr/share/opensearch/data
945.     networks:
946.       - opensearch-net
948.   opensearch-dashboards:
949.     container_name: opensearch-dashboards
950.     image: opensearchproject/opensearch-dashboards:latest
951.     profiles:
952.       - opensearch
953.     environment:
954.       OPENSEARCH_HOSTS: '["https://opensearch:9200"]'
955.     volumes:
956.       - ./volumes/opensearch/opensearch_dashboards.yml:/usr/share/opensearch-dashboards/config/opensearch_dashboards.yml
957.     networks:
958.       - opensearch-net
959.     depends_on:
960.       - opensearch
962.   # opengauss vector database.
963.   opengauss:
964.     image: opengauss/opengauss:7.0.0-RC1
965.     profiles:
966.       - opengauss
967.     privileged: true
968.     restart: always
969.     environment:
970.       GS_USERNAME: ${OPENGAUSS_USER:-postgres}
971.       GS_PASSWORD: ${OPENGAUSS_PASSWORD:-Dify@123}
972.       GS_PORT: ${OPENGAUSS_PORT:-6600}
973.       GS_DB: ${OPENGAUSS_DATABASE:-dify}
974.     volumes:
975.       - ./volumes/opengauss/data:/var/lib/opengauss/data
976.     healthcheck:
977.       test: ["CMD-SHELL", "netstat -lntp | grep tcp6 > /dev/null 2>&1"]
978.       interval: 10s
979.       timeout: 10s
980.       retries: 10
981.     ports:
982.       - ${OPENGAUSS_PORT:-6600}:${OPENGAUSS_PORT:-6600}
984.   # MyScale vector database
985.   myscale:
986.     container_name: myscale
987.     image: myscale/myscaledb:1.6.4
988.     profiles:
989.       - myscale
990.     restart: always
991.     tty: true
992.     volumes:
993.       - ./volumes/myscale/data:/var/lib/clickhouse
994.       - ./volumes/myscale/log:/var/log/clickhouse-server
995.       - ./volumes/myscale/config/users.d/custom_users_config.xml:/etc/clickhouse-server/users.d/custom_users_config.xml
996.     ports:
997.       - ${MYSCALE_PORT:-8123}:${MYSCALE_PORT:-8123}
999.   # https://www.elastic.co/guide/en/elasticsearch/reference/current/settings.html
1000.   # https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html#docker-prod-prerequisites
1001.   elasticsearch:
1002.     image: docker.elastic.co/elasticsearch/elasticsearch:8.14.3
1003.     container_name: elasticsearch
1004.     profiles:
1005.       - elasticsearch
1006.       - elasticsearch-ja
1007.     restart: always
1008.     volumes:
1009.       - ./elasticsearch/docker-entrypoint.sh:/docker-entrypoint-mount.sh
1010.       - dify_es01_data:/usr/share/elasticsearch/data
1011.     environment:
1012.       ELASTIC_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic}
1013.       VECTOR_STORE: ${VECTOR_STORE:-}
1014.       cluster.name: dify-es-cluster
1015.       node.name: dify-es0
1016.       discovery.type: single-node
1017.       xpack.license.self_generated.type: basic
1018.       xpack.security.enabled: 'true'
1019.       xpack.security.enrollment.enabled: 'false'
1020.       xpack.security.http.ssl.enabled: 'false'
1021.     ports:
1022.       - ${ELASTICSEARCH_PORT:-9200}:9200
1023.     deploy:
1024.       resources:
1025.         limits:
1026.           memory: 2g
1027.     entrypoint: [ 'sh', '-c', "sh /docker-entrypoint-mount.sh" ]
1028.     healthcheck:
1029.       test: [ 'CMD', 'curl', '-s', 'http://localhost:9200/_cluster/health?pretty' ]
1030.       interval: 30s
1031.       timeout: 10s
1032.       retries: 50
1034.   # https://www.elastic.co/guide/en/kibana/current/docker.html
1035.   # https://www.elastic.co/guide/en/kibana/current/settings.html
1036.   kibana:
1037.     image: docker.elastic.co/kibana/kibana:8.14.3
1038.     container_name: kibana
1039.     profiles:
1040.       - elasticsearch
1041.     depends_on:
1042.       - elasticsearch
1043.     restart: always
1044.     environment:
1045.       XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa
1046.       NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana
1047.       XPACK_SECURITY_ENABLED: 'true'
1048.       XPACK_SECURITY_ENROLLMENT_ENABLED: 'false'
1049.       XPACK_SECURITY_HTTP_SSL_ENABLED: 'false'
1050.       XPACK_FLEET_ISAIRGAPPED: 'true'
1051.       I18N_LOCALE: zh-CN
1052.       SERVER_PORT: '5601'
1053.       ELASTICSEARCH_HOSTS: http://elasticsearch:9200
1054.     ports:
1055.       - ${KIBANA_PORT:-5601}:5601
1056.     healthcheck:
1057.       test: [ 'CMD-SHELL', 'curl -s http://localhost:5601 >/dev/null || exit 1' ]
1058.       interval: 30s
1059.       timeout: 10s
1060.       retries: 3
1062.   # unstructured .
1063.   # (if used, you need to set ETL_TYPE to Unstructured in the api & worker service.)
1064.   unstructured:
1065.     image: downloads.unstructured.io/unstructured-io/unstructured-api:latest
1066.     profiles:
1067.       - unstructured
1068.     restart: always
1069.     volumes:
1070.       - ./volumes/unstructured:/app/data
1072. networks:
1073.   # create a network between sandbox, api and ssrf_proxy, and can not access outside.
1074.   ssrf_proxy_network:
1075.     driver: bridge
1076.     internal: true
1077.   milvus:
1078.     driver: bridge
1079.   opensearch-net:
1080.     driver: bridge
1081.     internal: true
1083. volumes:
1084.   oradata:
1085.   dify_es01_data:

复制代码

实际上，我只是对api、woker、plugin_daemon三个模块的启动参数做了修改，将image更换成上述生成的新镜像，并增加command部分，用wait-for-it.sh确保各模块的前序模块已经加载后，再运行自身的启动命令。其中plugin_daemon部分的command命令比力特殊：

1. /wait-for-it.sh db:5432 -t 30 -- /bin/bash -c "/app/entrypoint.sh"

复制代码

wait-for-it.sh后的/bin/bash -c "/app/entrypoint.sh"是利用如下使命获得的：

1. docker inspect <plugin_daemon_container_name> --format '{{.Config.Cmd}}'

复制代码

注意<plugin_daemon_container_name>要更换成plugin_daemon的容器名（可以用容器ID），而不是镜像名。
5.在dify\docker目录中，运行如下命令：

1. docker compose up -d

复制代码

6.在docker destkop的containers页面中，点击"docker"就可以看到dify启动的log。点击docker下一层的plugin_daemon-1，可以看到db的初始化情况。
至此，failed to initialize database错误消散。
上述方法是在我的windows11、docker desktop环境下实现，其他环境未做测试。


免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！更多信息从访问主页：qidao123.com:ToB企服之家，中国第一个企服评测及商务社交产业平台。

---

欢迎光临 qidao123.com技术社区-IT企服评测·应用市场 (https://dis.qidao123.com/)

Powered by Discuz! X3.4